3 matches found
CVE-2006-3884
CVE-2006-3884 affects Gonafish LinksCaffe 3.0, specifically the PHP file links.php. The vulnerability arises from SQL injection via four parameters: (1) offset, (2) limit, (3) newdays in the new action, and (4) link_id in the deadlink action. Exploitation could allow remote attackers to modify th...
CVE-2006-3932
Gonafish LinksCaffe 3.0 is affected by a SQL injection in links.php, exploitable via the cat parameter, allowing remote attackers to execute arbitrary SQL commands. The vulnerability is documented in CVE-2006-3932 with notes that provenance is from third-party information. According to the availa...
CVE-2006-3883
CVE-2006-3883 affects Gonafish LinksCaffe 3.0 with multiple XSS vulnerabilities exposed through specific parameters: tablewidth in counter.php; newdays in links.php; and tableborder, menucolor, textcolor, bodycolor in menu.inc.php. The connected documents confirm the vulnerability pattern but do ...